Systems and methods for active signature detection

ABSTRACT

Disclosed embodiments describe a system for completing a transaction using an electronic transaction card by receiving, from a user device executing a software application, a selection of a first account function associated with a financial transaction; determining that the account function requires user verification; detecting, via a motion detection component, a motion pattern performed on the electronic transaction card by the user; authenticating an identity of the user, by the electronic transaction card, based on the detected motion pattern; and completing, by the user device, the financial transaction.

TECHNICAL FIELD

The disclosed embodiments generally relate to completing an electronictransaction using an electronic account card and, more particularly, toauthenticating an electronic account card containing a motion detectiondevice.

BACKGROUND

Many types of interactions on computer systems, such as authenticatedlog-ins and other transaction-based processes, are insecure. Forexample, when attempting to log in to a website on a computer, thewebsite may request a username and password. Anyone with that set ofinformation—be it an authorized user or a nefarious one—may use thewebsite for any purpose. To combat this insecurity, some transactionsrequire multi-factor authentication—often referred to as “what you knowand what you have.” For example, when logging into a website, thewebsite may request a username/password combination (“what you know”)along with a six-digit number displayed on an electronic device (“whatyou have”). The six-digit number may change every 30 seconds so as toavoid reuse by an unauthorized user. As another example, a credit cardmay have information stored on it that can enable a credit cardprocessor to know whether the card is physically present in the user'shands. For example, while the card may have a card number printed on theobverse (“what you know”) some information may only be present as partof an EMV chip (“what you have”). Certain devices may read informationfrom the EMV chip for contactless authentication of the user. Somedevices allow multi-factor authentication using a “what you know” factorand a “what you are,” e.g., a biometric such as face recognition,fingerprint verification, and/or iris scan. However, this procedure alsolacks the ideal level of security in that a nefarious user may be ableto copy the information stored on the card, and verification informationon the card may be static. Thus, a nefarious user may copy andrepeatedly use the verification information.

Due to these and other drawbacks associated with user authentication, auser may choose not to use his transaction card as a means ofauthentication with a mobile device. Therefore, a need exists fortechnology allowing for, among other things, a secure and efficientauthentication of a user of a transaction card.

SUMMARY

Consistent with disclosed embodiments, systems and methods forauthenticating a user with a mobile device are provided.

In one embodiment, a system for completing a transaction using anelectronic transaction card may include: a memory device storinginstructions; and a processor configured to execute the instructions to:receive, from a user device executing a software application, aselection of a first account function associated with a financialtransaction; determine that the account function requires userverification; detect, via a motion detection component, a motion patternperformed on the electronic transaction card by the user; authenticatean identity of the user, by the electronic transaction card, based onthe detected motion pattern; and complete, by the user device, thefinancial transaction.

In another embodiment, a method for completing a transaction using anelectronic transaction card may include: receiving, from a user deviceexecuting a software application, a selection of a first accountfunction associated with a financial transaction; determining that theaccount function requires user verification; detecting, via a motiondetection component, a motion pattern performed on the electronictransaction card by the user; authenticating an identity of the user, bythe electronic transaction card, the user based on the detected motionpattern; and completing, by the user device, the financial transaction.

In another embodiment, a non-transitory computer-readable storage mediummay store instructions for completing a transaction using an electronictransaction card, the instructions including: receiving, from a userdevice executing a software application, a selection of a first accountfunction associated with a financial transaction; determining that theaccount function requires user verification; detecting, via a motiondetection component, a motion pattern performed on the electronictransaction card by the user; verifying, by the electronic transactioncard, the user based on the detected motion pattern; and completing thefinancial transaction.

Consistent with other disclosed embodiments, tangible computer-readablestorage media may store program instructions that are executable by oneor more processors to implement any of the processes disclosed herein.

It is to be understood that both the foregoing general description andthe following detailed description are exemplary and explanatory only,and are not restrictive of the disclosed embodiments.

BRIEF DESCRIPTION OF THE DRAWINGS

The accompanying drawings, which are incorporated in and constitute apart of this specification, illustrate several embodiments and, togetherwith the description, serve to explain the disclosed principles. In thedrawings:

FIG. 1 is a diagram of an exemplary system that may be used to completea transaction using an electronic transaction card, consistent withdisclosed embodiments.

FIG. 2 is a diagram of an exemplary computing device, consistent withdisclosed embodiments.

FIG. 3 is a diagram of an exemplary electronic transaction card,consistent with disclosed embodiments.

FIG. 4 is a flowchart of an exemplary transaction card configurationprocess, consistent with disclosed embodiments.

FIG. 5 is a flowchart of an exemplary authentication process, consistentwith disclosed embodiments.

FIG. 6 is a flowchart of an exemplary authentication process, consistentwith disclosed embodiments.

DESCRIPTION OF THE EMBODIMENTS

The present disclosure provides systems and methods for completing atransaction using an electronic transaction card. The electronictransaction card may be associated with a financial account held by theuser with a financial service provider and may contain electroniccomponents comprising a motion detection device, power source, andelectronic memory device. A user may configure the memory device of theelectronic card to store a unique motion pattern, such that the user maynot complete a transaction using the card without first performing aphysical manipulation of the card in the configured motion pattern.

The term “transaction card,” as used herein, refers to any physical cardproduct that is configured to provide information, such as financialinformation (e.g., card numbers, account numbers, account balance,etc.), quasi-financial information (e.g., rewards balance, discountinformation, etc.), and/or individual-identifying information (e.g.,name, address, etc.), when the card is read by a card reader. Examplesof transaction cards include credit cards, debit cards, gift cards,rewards cards, frequent flyer cards, merchant-specific cards, discountcards, etc., but are not limited thereto. The term “transaction card”may include an identification card such as a passport card, a driver'slicense, an entry point access card, or the like. The physicalproperties of the transaction card (e.g., size, flexibility, location ofvarious components included in the card) may meet the variousinternational standards, including, e.g., ISO/IEC 7810, ISO/IEC 7811,ISO/IEC 7812, ISO/IEC 7813, ISO/IEC 7816, ISO 8583, ISO/IEC 4909, andISO/IEC 14443. For example, a transaction card may have a dimension of85.60 mm (width) by 53.98 mm (height) by 0.76 mm (thickness), asspecified in ISO/IEC 7810.

Additional aspects of the disclosed embodiments are set forth below inthis disclosure. Reference will now be made in detail to exemplaryembodiments, examples of which are illustrated in the accompanyingdrawings and disclosed herein. Wherever convenient, the same referencenumbers will be used throughout the drawings to refer to the same orlike parts. In the following description, certain aspects andembodiments of the present disclosure will become evident. It should beunderstood that the disclosure, in its broadest sense, could bepracticed without having one or more features of these aspects andembodiments. It should also be understood that these aspects andembodiments are merely exemplary.

FIG. 1 is a block diagram of an exemplary system 100 for performingoperations consistent with the disclosed embodiments. In someembodiments, system 100 may include user device 101, user 102, anelectronic transaction card 103, a network 104, and one or moreproduct/service provider systems 105. System 100 may further includeother components that perform or assist in the performance of one ormore processes consistent with the disclosed embodiments. The componentsand arrangements shown in FIG. 1 are not intended to limit the disclosedembodiments, as the components used to implement the disclosed processesand features may vary.

In some embodiments, user 102 operating a user device 101 may beconfigured to cause transaction card 103 to detect and store a motionpattern as described below with reference to FIG. 4. User device 101 mayalso be configured to receive authentication of user 102 from thetransaction card 103. User device 101 may be a desktop computer, laptop,tablet, smartphone, multifunctional watch, pair of multifunctionalglasses, tracking device, electronic card, electronic wearable device,or any suitable device with computing capability. In some embodiments,user device 101 includes executable software instructions provided aspart of an application, or “app,” associated with a product/serviceprovider (included as part of 105) for performing operations associatedwith the product/service provider. A product/service provider mayinclude a financial service provider associated with a financial serviceaccount. In some embodiments, the disclosed authentication methods maybe performed in association with user 102's interaction with the app orapplication executed on user device 101. User device 101 is discussed inadditional detail with respect to FIG. 2, below.

In some embodiments, user 102 may possess an electronic transaction card103 associated with a financial service entity. Electronic card 103 maycomprise a credit card or debit card, or other membership oridentification type card. Electronic card 103 may include certainhardware and software components to detect and store a motion patternand to verify the motion pattern according to the disclosed embodiments.Electronic transaction card 103 and a component of product/serviceprovider system 105, e.g., an automated teller machine (ATM), may beconfigured to communicate with each other using one or more wirelessprotocols (e.g., Near Field Communication (NFC), BLUETOOTH™, BLUETOOTHLE™ (BLE), Radio-Frequency Identification (RFID)). Electronic card 103is discussed in additional detail with respect to FIG. 3, below.

As further described herein, the disclosed methods may authenticate user102 operating user device 101, using electronic card 103, etc. toperform a transaction or other interaction with a product/serviceprovider of product/service provider system 105. Product/serviceprovider system 105 may be associated with any entity with which user102 may communicate or interact with via, for example, user device 101.Product/service provider system 105 may provide functionality associatedwith a website or other network location accessible to user device 101executing a browser application, dedicated app, or other program forinteracting with product/service provider system 105. In someembodiments, product/service provider system 105 may be associated witha financial service entity that provides, maintains, manages, orotherwise offers financial services accessible via user device 101. Inanother embodiment, product/service provider system 105 may be apoint-of-sale (POS) system at a brick and mortar location or an ATM.

Product/service provider system 105 may include one or more computingdevices (e.g., computer(s), server(s), etc.), memory storing data and/orsoftware instructions (e.g., database(s), memory devices, etc.), andother known computing components configured to provide services toand/or interact with other components of system 100 (shown or notshown), such as user device 101, over network 104. In some embodiments,the computing components may include one or more processors configuredto execute software instructions stored on one or more memory devices toperform operations consistent with the disclosed embodiments. In someembodiments, product/service provider system 105 may take the form of aserver, special purpose computing device, a mainframe computer, or anycombination of these components. In certain embodiments, product/serviceprovider system 105 (or a system including product/service providersystem 105) may be configured as a particular apparatus, system, and thelike based on the storage, execution, and/or implementation of thesoftware instructions that perform one or more operations consistentwith the disclosed embodiments. Product/service provider system 105 maybe a standalone system, or it may be part of a subsystem, which may bepart of a larger system. Product/service provider system 105 may be asingle server or may be configured as a distributed computer systemincluding multiple servers or computers that interoperate to perform oneor more of the processes and functionalities associated with thedisclosed embodiments. The disclosed embodiments are not limited to anyparticular configuration of product/service provider system 105 orsystem 100.

Product/service provider system 105 and user device(s) 101 may beconfigured to communicate with each other over a network 104. In someembodiments, transaction card 103 may be configured to communicate withproduct/service provider system 105 and/or user device 101 over anetwork 104. Network 104 may comprise any type of computer networkingarrangement configured to provide communications or exchange data, orboth, between components of system 100. For example, network 104 mayinclude any type of network (including infrastructure) that providescommunications, exchanges information, and/or facilitates the exchangeof information, such as the Internet, a private data network, a virtualprivate network using a public network, a Wi-Fi network, a LAN or WANnetwork, and/or other suitable connections that may enable informationexchange among various components of system 100. Network 104 may alsoinclude a public switched telephone network (“PSTN”) and/or a wirelesscellular network. Network 104 may be a secured network or unsecurednetwork. In some embodiments, one or more components of system 100 maycommunicate directly through a dedicated communication link(s).

It is to be understood that the configuration of the functional buildingblocks of system 100 have been defined herein for the convenience of thedescription. The components and arrangement of the components includedin system 100 may vary. For example, in some embodiments, system 100 mayinclude other components that perform or assist in the performance ofone or more processes consistent with the disclosed methods. System 100includes a number of components generally described as computingdevices. Each of the computing devices may include any number ofcomputing components particularly configured as a special purposecomputing device to perform the functionality disclosed herein.Alternatives (including equivalents, extensions, variations, deviations,etc., of those described herein) will be apparent to persons skilled inthe relevant art(s) based on the teachings contained herein. Suchalternatives fall within the scope and spirit of the disclosedembodiments.

FIG. 2 shows an exemplary configuration of user device 101, consistentwith disclosed embodiments. User device 101 may enable a user 131 tooperate user device 101 to perform remote interactions or mobiletransactions with product/service provider system 110, for example, orreceive information from product/service provider system 110. In someembodiments, user device 101 may be a personal computing device. Forexample, user device 101 may be a smartphone, a laptop or notebookcomputer, a tablet, or any mobile or wearable device with computingability, or any combination of these computers and/or affiliatedcomponents.

FIG. 2 shows an exemplary configuration of user device 101, consistentwith disclosed embodiments. User device 101 may enable a user 102 tooperate user device 101 to perform remote interactions or mobiletransactions with product/service provider system 105, for example, orreceive information from product/service provider system 105. In someembodiments, user device 101 may be a personal computing device. Forexample, user device 101 may be a smartphone, a laptop or notebookcomputer, a tablet, or any mobile or wearable device with computingability, or any combination of these computers and/or affiliatedcomponents.

User device 101 may include one or more processors configured to executesoftware instructions stored in memory, such as memory 206 included inuser device 101. User device 101 may include software that when executedby a processor (e.g., processor 207) performs known Internet-relatedcommunication, content display processes, and other interactiveprocesses for a user of user device 101. For instance, user device 101may execute a browser or related mobile display software that generatesand displays interfaces including content on a display device 208included in, or in communication with, user device 101. User device 101may be a mobile device that executes mobile device applications and/ormobile device communication software that allows user device 101 tocommunicate with product/service provider system 105 and othercomponents over network 104, and generates and displays content ininterfaces via a display device 208 included in user device 101. Thedisclosed embodiments are not limited to any particular configuration ofuser device 101. User device 101 may include any arrangement of one ormore computing devices configured to perform one or more operationsconsistent with disclosed embodiments.

User device 101 may be configured with storage that stores one or moreoperating systems that perform known operating system functions whenexecuted by one or more processors. By way of example, the operatingsystems may include Microsoft Windows™, Unix™, Linux™, Android™, Apple™Mac OS operating systems, iOS, Chrome OS, or other types of operatingsystems. Accordingly, embodiments of the disclosed invention may operateand function with computer systems running any type of operating system.User device 101 may also include communication software that, whenexecuted by a processor, provides communications with network 104, suchas Web browser software, tablet or smart handheld device networkingsoftware, etc.

User device 101 may include a display 208 for displaying information.Display 208 may include, for example, liquid crystal displays (LCD),light emitting diode screens (LED), organic light emitting diode screens(OLED), a touch screen, and other known display devices. Display 208 maydisplay various information to user 102. For example, display 208 maydisplay an interactive interface to user 102 enabling user 102 tooperate user device 101 to perform certain aspects of the disclosedmethods. Display 208 may display touchable or selectable options foruser 102 to select, and may receive user selection of options through atouch screen or I/O devices 210.

I/O devices 209 may include one or more devices that allow user device101 to send and receive information or interactions from user 102 oranother device. For example, I/O devices 209 may include variousinput/output devices, such as a keyboard, a mouse-type device, a gesturesensor, an action sensor, a physical button, switch, microphone,touchscreen panel, stylus, etc. that may be manipulated by user 102 toinput information using user device 101. I/O devices 209 may alsoinclude an audio output device, such as a speaker configured to providesound and audio feedback to user 102 operating user device 101. In someembodiments, I/O devices 209 may include a light emitting component,such as an LED or other component capable of providing a visible signalto user 102. I/O devices 209 may also include one or more communicationmodules (not shown) for sending and receiving information from othercomponents in system 100 by, for example, establishing wired or wirelessconnectivity between user device 101, electronic card 103, and network104. I/O devices 209 may include a radio frequency, infrared, or othernear-field communication interfaces, for communicating with transactioncard 103 or other devices associated with user 102. Exemplarycommunication modules as I/O devices 209 may include, for example, ashort-range or near field wireless communication modem, a Wi-Ficommunication modem, or a cellular communication modem. In someembodiments, I/O devices 209 may include one or more short-range RFIDdevices may enable user device 101 to communicate via personal areanetwork, e.g., BLE, NFC, or other short-range communication protocol,with transaction card 103.

User device 101 may include at least one processor 207, which may be oneor more known computing processors, such as a microprocessor from theSnapdragon™ family manufactured by Qualcomm™, the Exynos™ familymanufactured by Samsung™, or any of various processors manufactured byApple™, for example. Processor 207 may constitute a single core ormultiple core processor that executes parallel processes simultaneously.For example, processor 207 may be a single core processor configuredwith virtual processing technologies. In certain embodiments, processor207 may use logical processors to simultaneously execute and controlmultiple processes. Processor 207 may implement virtual machinetechnologies, or other known technologies to provide the ability toexecute, control, run, manipulate, store, etc. multiple softwareprocesses, applications, programs, etc. In another embodiment, processor207 may include a multiple-core processor arrangement (e.g., dual core,quad core, etc.) configured to provide parallel processingfunctionalities to allow user device 101 to execute multiple processessimultaneously. One of ordinary skill in the art would understand thatother types of processor arrangements could be implemented that providefor the capabilities disclosed herein. The disclosed embodiments are notlimited to any type of processor(s) configured in user device 101.Processor 207 may execute various instructions stored in user device 101to perform various functions of the disclosed embodiments described ingreater detail below.

User device 101 may include a memory 206, which may be a volatile ornon-volatile, magnetic, semiconductor, optical, removable,non-removable, or other type of storage device or tangible (i.e.,non-transitory) computer-readable medium. Memory 206 may store one ormore programs 210. Programs 210 may include operating systems (notshown) that perform known operating system functions when executed byone or more processors. Disclosed embodiments may operate and functionwith computer systems running any type of operating system.

User device 101 may be a device that executes mobile applications forperforming operations consistent with disclosed embodiments, such as atablet, smartphone, or other mobile computing device. Thus, in someembodiments, user device 101 may have an application 211 installedthereon, which may enable user device 101 to communicate withproduct/service provider system 105 via network 104 and perform aspectsof the disclosed methods. For example, user device 101 may connect toproduct/service provider system 105 through the use of browser softwareto access and receive information or perform other operations associatedwith a product/service provider.

For example, in some embodiments, application 211 may provide aninstruction to the transaction card 103 to detect a motion patternduring a preconfigured time period and store the detected motionpattern. In other embodiments, user 102 may initiate a transaction viaapplication 211. Upon detecting a transaction, application 211 mayinstruct the user 102 to authenticate (e.g., by displaying a message ondisplay 208 or playing an audible prompt) at least by performing aphysical manipulation of the transaction card 103 Application 211 mayprovide instructions to transaction card 103 to detect a motion patternperformed by the user 102 on the transaction card 103 and to compare theperformed motion pattern to the stored motion pattern. For example,product/service provider system 105 may ask the user device 101 toauthenticate the user 102 before completing the transaction. Application211 may receive the request for authentication from product/serviceprovider system 105 and simultaneously prompt user 102 to perform aphysical manipulation of transaction card 103 and prompt the transactioncard 103 to begin recording motion data. In another embodiment,application 211 may prompt the user 102 to provide input to cause theapplication 211 to instruct transaction card 103 to begin collectingmotion data. For example, if user device 101 includes a touch-screen,the user may select “Start” via touch-sensitive display 208. In anotherexample, the user 102 may initiate collection of motion data by pressinga button or switch located on the transaction card 103. If the motionpatterns match or are substantially similar, the transaction card 103may communicate with user device 101 to verify user 102. Application 211may prompt the user 102 to input additional authentication factorsincluding, for example, a username and password, biometric (e.g.,fingerprint scan) information, or one-time password. Upon authenticatingthe user 102 based on the performed motion pattern and one or moreadditional authentication factors, application 211 may allow the user tocomplete a transaction. In some embodiments, upon verification of theperformed motion pattern the application 211 may provide instructions toautomatically complete a transaction. For example, product/serviceprovider system 105 may deny the transaction if the user 102 is notauthenticated based on the motion pattern performed on the transactioncard 103. In some embodiments, user device 101 may not transmit accountinformation and/or transaction data to product/service provider system105 without verification of the user 102. A transaction may include, forexample, a purchase, money transfer, or payment.

FIG. 3 shows a diagram of an exemplary electronic card 103, consistentwith disclosed embodiments. In some embodiments, electronic card 103 maybe the approximate size and shape of a traditional transaction card,such as a credit card. Electronic card 103 may have embedded electronicsfor performing aspects of the disclosed authentication methods. Asshown, electronic card 103 may include processor 312, memory 313, powersource 314, motion detection device 315, input device 316, andcommunication device 317. In some embodiments, electronic card 103 mayinclude a secure processor 318. In some embodiments, transaction card103 may include a magnetic stripe (not shown) or other transactioncomponent (not shown), for example, an EMV chip. In some embodiments,electronic card 103 may include more or fewer components than shown inFIG. 3.

Processor 312 may comprise one or more known or specialized processingdevices, of sufficient size and form factor to fit within electroniccard 103 when configured to be about the size of a traditionaltransaction card. In some embodiments, processor 312 may include anyconfiguration capable of performing functions related to the disclosedmethods such as, for example, recording information indicative of amotion pattern detected by motion detection device 315 and/or comparinga detected motion pattern against a motion pattern stored in memory 313.Processor 312 may also control power source 314, send and receive data,read from and write to memory 313, receive and analyze data from motiondetection device 315, receive and process input from input device 316,and any other functions consistent with the disclosed embodiments.

Secure processor 318 may comprise one or more known or specializedprocessing devices, of sufficient size and form factor to fit withinelectronic card 103 when configured to be about the size of atraditional transaction card. In some embodiments, secure processor 318may be an IC comprising a processor and memory. Secure processor 318 mayensure a secure medium for storing the motion pattern and/or gaitpattern. In some embodiments, the data stored on the secure processor318 is protected by a public key/private key relationship any time saiddata is exchanged with the user device 101 or the product/serviceprovider 105.

Memory 313 may include a volatile or non-volatile, magnetic,semiconductor (e.g., EEPROM, flash memory, etc.), tape, optical,removable, non-removable, or other type of storage device or tangible(i.e., non-transitory) computer-readable medium that stores one or moremotion and/or gait patterns, user information, and othercomputer-executable instructions.

Power source 314 may include a power storage device such as a battery orcapacitor, a power receiver such as an inductive power coil or awireless power receiver, a power generator such as a solar or kineticpower generator, or any combination thereof. In some embodiments, powersource 314 may include one or more other known devices capable ofgenerating, receiving, and/or storing electrical energy.

Motion detection device 315 may be a sensor configured to detect motionpatterns, for example, a multi-axis accelerometer, gyroscope,magnetometer, or any combination thereof. In some embodiments,transaction card 103 may include multiple motion detection devices 315located on different sides, edges, or faces of transaction card 103 todetect complex motion patterns. In some embodiments, processor 312 maydetect motion patterns associated with multiple motion detectiondevices, such as a sequence of taps on a first side of transaction card103, followed by a sequence of taps on a second side of transaction card103. In another embodiment, motion detection device 315 may beconfigured to sense and store a gait pattern of the user 102. Processor312 may store one or more detected gait cycles associated with the user.In some embodiments, motion detection device 315 records several gaitcycles and the processor 312 calculates and stores an average gait cycleof the user 102.

Input device 316 may include one or more buttons, switches, or otherforms of input mechanisms for receiving an indication or instructionfrom user 102. In some embodiments, input device 316 may receive inputfrom user 102, to cause processor 312 to perform various functionsassociated with the disclosed embodiments. For example, user 102 mayprovide input via input device 316 to start and stop motion detection bymotion detection device 315.

In some embodiments, transaction card 103 may include communicationdevice 317, for transmitting and/or receiving data from one or moreexternal locations, e.g., from user device 101 and/or product/serviceprovider system 105. Communication device 317 may comprise a short-rangewireless transceiver, or a near-field communication chip. For example,communication device 317 may be an NFC antenna, radiofrequencyidentification (RFID) device, Bluetooth® device, or WiFi device. In someembodiments, communication device 317 may be configured to communicateusing an IEEE 802.15.4 protocol, e.g., Zigbee, Thread, etc.Communication device 317 may be configured to communicate with userdevice 101 or other systems such as a contactless card reader or othersensors configured to detect the presence of transaction card 103.

User device 101 and electronic transaction card 103, described above,are only exemplary devices for authenticating a user according to thedisclosed embodiments. Other devices capable of implementing suitablecomputing components and that may be manipulated by a user may also beused to authenticate a user according to the disclosed embodiments.

The following processes are directed to various embodiments forcompleting a transaction using an electronic transaction card andauthenticating a user with an electronic transaction card. The followingprocesses may be performed by various aspects and components of userdevice 101, electronic transaction card 103, or product/service providersystem 105 as is apparent from the disclosure.

FIG. 4 illustrates a flowchart of a process 400 for configuring atransaction card according to some embodiments. In some embodiments,process 400 may be executed, in part, in conjunction with a user'sinteraction with an application, such as application 211 executed onuser device 101. In some embodiments, the transaction card 103 may storemotion patterns associated with a particular application 211 or aparticular product/service provider system 105. Thus, in someembodiments, a user may associate certain motion patterns as beingunique to application 211, to a particular transaction type, or aparticular product/service provider system 105.

At step 402, the user may initiate a transaction card configurationprocess. For example, the user 102 may select an account or atransaction card setup function of application 211. In some embodiments,the user may be prompted to enter one or more authentication factors,for example, a username and password, transaction card number, accountnumber, and/or biometric information, before application 211 allows theuser to store a motion pattern or gait pattern on the transaction card103.

At step 404, application 211 causes the user device 101 to transmit asignal to transaction card 103. The transmitted signal may includeinstructions causing the motion detection device 315 to begin collectingand storing motion data.

At step 406, application 211 may prompt the user 102, for example, viadisplay 208, to perform a physical manipulation of the transaction card103 of the user's choosing. For example, the user 102 may perform amanipulation of the card to be stored as the secret motion pattern to beperformed by the user when completing a transaction. Exemplary motionpatterns may be a geometric shape, the user's signature performed withthe card, a series of taps on various edges of the card, etc. In someembodiments, steps 404 and 406 occur simultaneously.

In another embodiment, at step 406, application 211 may display, to theuser, instructions to store the transaction card as the user wouldnormally carry the card and walk for a preconfigured amount of time toallow the motion detection device 315 of transaction card 103 to collectdata indicative of the gait pattern of the user. For example, uponreceiving said prompt, the user may place the card in a wallet and placethe wallet inside a handbag. The prompt may indicate to the user to walkwith the card for a period of, for example, two minutes, to allow thecard to record a gait pattern of the user. After the preconfiguredamount of time has elapsed, processor 312 may cause motion device 315 tostop recording data and may transmit a signal, via communication device217, to user device 101 indicating that motion data collection hascompleted. In some embodiments, the processor 312 may collect dataindicative of one or more gait cycles of the user and generate dataindicative of an average gait cycle.

At step 408, application 211 may receive input from a user indicatingthe user completed the desired motion pattern. For example, if userdevice 101 includes a touch-screen, the user may select an “EndRecording” function via touch-sensitive display 208 causing the userdevice 101 to transmit a second signal to transaction card 103 includinginstructions to cause motion detection device 315 to shut off or toenter a sleep mode and cease collecting motion data. Alternatively, insome embodiments transaction card 103 may include a button, e.g., inputdevice 316, that the user is prompted to press while performing themotion pattern on the transaction card. When the button is released,motion detection device 315 may stop recording motion data and transmita signal to user device 101 indicating the user has ended the motiondetection. In another embodiment, when the detected motion is a gaitpattern, motion detection device 315 may stop recording automaticallyafter a preconfigured period of time has elapsed.

In some embodiments, processor 312 may be configured to require apreconfigured minimum number of data points and/or a preconfiguredminimum duration of movement of the card. For example, a motion patternin which the user moves the transaction card vertically for a distanceof four inches is not a secure motion pattern and may be rejected byprocessor 312. In this example, the transaction card 103, viacommunication device 317, may communicate with user device 101 toinstruct application 211 to execute steps 402-408 one or more additionaltimes until the user executes a motion pattern satisfying the minimumrequirements for duration and complexity. In other embodiments, userdevice 101 may display a strength rating of the motion pattern based onthe number of data points recorded. In some embodiments, the user may beprompted by the application 211 to complete steps 402-408 by performingthe same motion pattern two or more times such that processor 312 maycalculate an average motion pattern based on each performed motionpattern.

At step 410, transaction card 103 stores, in memory 313, the motionpattern or gait pattern performed by the user on transaction card 103.In some embodiments, transaction card 103 may transmit, viacommunication device 317, a signal to user device 101 indicating thatthe motion or gait pattern has been successfully recorded and stored ontransaction card 103.

FIG. 5 illustrates a flow chart of a process 500 for completing atransaction using an electronic transaction card according to someembodiments. In some embodiments, process 500 may be executed, in part,in conjunction with a user's interaction with an application, such asapplication 211 executed on user device 101. In some embodiments, thetransaction card 103 may store motion patterns associated with aparticular application 211 or a particular product/service providersystem 105. Thus, in some embodiments, a user may associate certainmotion patterns as being unique to application 211, to a particulartransaction type, or a particular product/service provider system 105.Thus, a user may complete a purchase by performing a first motionpattern on the transaction card 103 and may complete a deposit byperforming a second motion pattern on the transaction card 103.

At step 502, the processor, e.g., processor 207 of user device 101, mayreceive a selection of a first account function associated with afinancial transaction. For example, the user may open application 211and select a particular transaction type by navigating through one ormore menu options within application 211. In some embodiments, the usermay select a transaction type within application 211 and provide one ormore transaction details. In another embodiment, application 211 mayreceive one or more transaction details via I/O device 209.

At step 504, the processor determines that the account function requiresverification. In some embodiments, application 211 may requireverification of the user's identity when the application is opened.Before completing the transaction, application 211 may prompt the userto provide identity verification.

At step 506, motion detection device 315 of the electronic transactioncard 103 may detect a physical manipulation of the transaction card 103performed by the user. The user may be prompted via display 208 ofdevice 101 to perform the motion pattern. In some embodiments, the usermay press a button, e.g., input device 316, to initiate motion detectiondevice 315 to begin detecting a physical manipulation of the card 103.The user may press the button to cause the motion detection device 315to stop collecting data. In some embodiments, motion detection device315 may detect physical manipulation of the transaction card 103 at avariable sampling rate. For example, motion detection device 315 may beconstantly sampling at a low rate (e.g., 10-50 Hz) to detect simplemotions and gestures while conserving power. Upon detection of a simplemotion, the detection device may then relay a signal to the mainprocessor 312 to ‘wake up’ or enter its full power runtime state. Afterreceiving a motion interrupt, i.e., the simple motion, from motiondetection device 315, the main processor 312 may send a signal to motiondetection device 315 to increase the sampling rate, for example, to 200Hz or greater. With the sampling rate increased, the processor 312 mayreceive a high resolution of motion data from device 315 enablingprocessor 312 to receive data indicative of more sophisticated gesturesand patterns. Once the authentication and/or transaction is completed,processor 312 may send a signal to motion detection device 315 to returnto the lower sampling rate, thus causing the transaction card 103 toconserve power.

At step 508, processor 312 of transaction card 103 receives dataindicative of a physical manipulation of the card 103 from motiondetection device 315. Processor 312 may compare the received data to astored motion pattern and verify the user based on the detected motionpattern. For example, processor 312 may verify the user if the detectedmotion pattern is the same as the stored motion pattern. In someembodiments, processor 312 may verify the user if the detected motionpattern is within a threshold, for example, if the data indicative ofthe detected motion pattern is a 98% match to the data defining thestored motion pattern. If the motion patterns match, processor 312 maycause communications device 317 to transmit data to user device 101indicating the user is verified.

In some embodiments, the user may have a number of attempts to completethe motion pattern to be verified. If the user executes a motion patternnot matching the stored motion pattern, application 211 may lock theuser account from completing any transactions or may prompt the user tocomplete one or more additional authentication activities.

At step 510, processor 207 completes the transaction initiated by theuser of device 101. For example, upon verification of the user, userdevice 101 may transmit the account information of the user and/or thetransaction details to product/service provider system 105. In anotherembodiment, product/service provider system 105 may request verificationof the user from user device 101. If the user is authenticated based onperformance of steps 502-508 described above, user device 101 maycommunicate with product/service provider 105 indicating that the userwas successfully verified. After receiving said communication,product/service provider system 105 may complete the requestedtransaction.

FIG. 6 illustrates a flow chart of a process 600 for completing atransaction using an electronic transaction card according to someembodiments. In some embodiments, process 600 may be executed, in part,in conjunction with a user's interaction with an application, such asapplication 211 executed on user device 101. In some embodiments, thetransaction card 103 may store a gait pattern comprised of one or moregait cycles of the user.

At step 602, the processor, e.g., processor 207 of user device 101, mayreceive a selection of a first account function associated with afinancial transaction. For example, the user may open application 211and select a particular transaction type by navigating through one ormore menu options within application 211.

At step 604, the processor determines that the account function requiresverification. In some embodiments, application 211 may requireverification of the user's identity when the application is opened. Inanother embodiment, a user may select a transaction type withinapplication 211 and provide one or more transaction details. In anotherembodiment, application 211 may receive one or more transaction detailsvia I/O device 209 Before completing the transaction, application 211may prompt the user to provide identity verification.

At step 606, motion detection device 315 of the electronic transactioncard 103 may detect a gait pattern of the user. For example, motiondetection device 315 may collect motion data while the transaction card103 is in a pocket or a purse of the user. Collected data maytemporarily be stored in memory 313. In other embodiments, a certainmotion, such as the initial movement of a gait cycle, may initiatemotion detection device to start collecting data. In some embodiments,gait data may be collected by motion detection device 315 at a low(e.g., 10-50 Hz) sampling rate.

At step 608, processor 312 verifies the user based on the detected gaitpattern. When the user selects a transaction, via device 101, I/O device209 may communicate with transaction card 103 to cause processor 312 tocompare collected gait pattern data with stored gait pattern data. Ifthe gait patterns match, processor 312 may cause communications device317 to transmit data to user device 101 indicating the user is verified.If the detected gait pattern does not match the stored gait pattern,application 211 may prompt the user to complete one or more additionalauthentication activities.

In some embodiments, processor 312 may compare an average gait cycle tothe detected gait cycle, or an average gait cycle based on one or moredetected gait cycles. The gait cycles may be considered a match if, forexample, the average detected gait cycle and average stored gait cyclematch within a preconfigured margin of error. In some embodiments, whencomparing gate data, processor 312 may execute an algorithm comparingdata on each axis such as threshold (g-forces), movement durations, andtime between movements, etc.

At step 610, processor 207 completes the transaction initiated by theuser of device 101. For example, upon verification of the user, userdevice 101 may transmit the account information of the user and/or thetransaction details to product/service provider system 105. In anotherembodiment, product/service provider system 105 may request verificationof the user from user device 101. If the user is authenticated based onperformance of steps 602-608 described above, user device 101 maycommunicate with product/service provider 105 indicating that the userwas successfully verified. After receiving said communication,product/service provider system 105 may complete the requestedtransaction.

In another embodiment, processes 400 and 500 may be initiated by a POSor by an ATM communicating with transaction card 103. For example, theuser may initiate a withdrawal at an ATM. Before completing thewithdrawal, the ATM may prompt the user to complete a motion pattern. Ifthe user is verified by processor 312, communications device 317 maytransmit a signal instruction the ATM to complete the withdrawal. Insome embodiments, transaction card 103 may communicate through a primaryaccount number (PAN) or through direct contact through an EMV terminalof, for example, a POS or ATM, using an EMV chip of the transaction card103.

The exemplary disclosed embodiments describe systems and methods forauthenticating a user with a transaction card comprising a polymorphictag. The foregoing description has been presented for purposes ofillustration. It is not exhaustive and is not limited to the preciseforms or embodiments disclosed. Modifications and adaptations of theembodiments will be apparent from consideration of the specification andpractice of the disclosed embodiments. For example, the describedimplementations include hardware and software, but systems and methodsconsistent with the present disclosure can be implemented as hardwarealone.

Computer programs based on the written description and methods of thisspecification are within the skill of a software developer. The variousprograms or program modules can be created using a variety ofprogramming techniques. For example, program sections or program modulescan be designed in or by means of Java, C, C++, assembly language, orany such programming languages. One or more of such software sections ormodules can be integrated into a computer system, computer-readablemedia, or existing communications software.

Moreover, while illustrative embodiments have been described herein, thescope includes any and all embodiments having equivalent elements,modifications, omissions, combinations (e.g., of aspects across variousembodiments), adaptations or alterations based on the presentdisclosure. The elements in the claims are to be interpreted broadlybased on the language employed in the claims and not limited to examplesdescribed in the present specification or during the prosecution of theapplication, which examples are to be construed as non-exclusive.Further, the steps of the disclosed methods can be modified in anymanner, including by reordering steps or inserting or deleting steps.

Furthermore, although aspects of the disclosed embodiments are describedas being associated with data stored in memory and other tangiblecomputer-readable storage mediums, one skilled in the art willappreciate that these aspects can also be stored on and executed frommany types of non-transitory computer-readable media, such as secondarystorage devices, like hard disks, floppy disks, or CD-ROM, or otherforms of RAM or ROM.

It is intended, therefore, that the specification and examples beconsidered as example only, with a true scope and spirit being indicatedby the following claims and their full scope of equivalents.

1-19. (canceled)
 20. A system for completing a transaction using atransaction card, the system comprising: a memory device storinginstructions; and a processor configured to execute the instructions to:transmit, to a transaction card, instructions to enable variable-ratecollection of motion pattern data; display, via a user interface, aprompt instructing a user to execute a motion pattern with thetransaction card; receive, from the transaction card, an indicationbased on a comparison, by the transaction card, of the executed motionpattern with stored motion pattern data; based on the indication,provide instructions to a service provider system to complete thetransaction; and transmit, to the transaction card, instructions todisable variable-rate collection of motion pattern data.
 21. The systemof claim 20, wherein the motion pattern represents a shape, a series oftaps on one or more edges of the electronic transaction card, or asignature.
 22. The system of claim 20, wherein the motion pattern isconfigured by the user.
 23. The system of claim 20, wherein thetransaction card communicates with the system via a near-fieldcommunication component.
 24. The system of claim 20, wherein theinstructions to enable variable-rate collection of motion pattern dataare configured to cause a motion detection device of the transactioncard to switch from a low-power state to a full-power state.
 25. Thesystem of claim 24, wherein the low-power state is associated with alower sampling rate than the full-power state.
 26. The system of claim24, wherein the instructions to disable variable-rate collection ofmotion pattern data are configured to cause a motion detection device ofthe transaction card to switch from a full-power state to a low-powerstate.
 27. The system of claim 20, wherein the processor is furtherconfigured to execute the instructions to: display, via the userinterface, a second prompt instructing the user to repeat the motionpattern with the transaction card.
 28. The system of claim 20, whereinthe processor is further configured to execute the instructions to:receive, from the transaction card, an indication that the executedmotion pattern does not match the stored motion pattern data; andprovide instructions to the service provider system to deny thetransaction.
 29. The system of claim 20, wherein the processor isfurther configured to execute the instructions to: receiving, from theservice provider system, an authentication request associated with thetransaction.
 30. A computer-implemented method for completing atransaction using an electronic transaction card, comprising:transmitting, to a transaction card, instructions to enablevariable-rate collection of motion pattern data; displaying, via a userinterface, a prompt instructing a user to execute a motion pattern withthe transaction card; receiving, from the transaction card, anindication based on a comparison, by the transaction card, of theexecuted motion pattern with stored motion pattern data; based on theindication, providing instructions to a service provider system tocomplete the transaction; and transmitting, to the transaction card,instructions to disable variable-rate collection of motion pattern data.31. The method of claim 30, wherein the motion pattern represents ashape, a series of taps on one or more edges of the electronictransaction card, a signature, or a gait pattern associated with theuser.
 32. The method of claim 30, wherein the motion pattern isconfigured by the user.
 33. The method of claim 30, wherein thetransaction card communicates with the system via a near-fieldcommunication component.
 34. The method of claim 30, wherein theinstructions to enable variable-rate collection of motion pattern dataare configured to cause a motion detection device of the transactioncard to switch from a low-power state to a full-power state.
 35. Themethod of claim 34, wherein the low-power state is associated with alower sampling rate than the full-power state.
 36. The method of claim34, wherein the instructions to disable variable-rate collection ofmotion pattern data are configured to cause a motion detection device ofthe transaction card to switch from a full-power state to a low-powerstate.
 37. The method of claim 30, further comprising: displaying, viathe user interface, a second prompt instructing the user to repeat themotion pattern with the transaction card.
 38. The method of claim 30,further comprising: receiving, from the transaction card, an indicationthat the executed motion pattern does not match the stored motionpattern data; and displaying, via the user interface, a second promptinstructing the user to provide additional authentication.
 39. Themethod of claim 30, further comprising receiving, from the serviceprovider system, an authentication request associated with thetransaction.